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MULTILAYER FIREWALL SYSTEM 


G06F13/00; H04L29/06; G06FMI00; H04L29/06; (IPC1- 
7): G06F13/00; H04L12/24; H04L12/26; H04L12/66 

H04L29/06S2B6; H04L29/06S2; H04L29/06S2A; 
H04L29/06S2A1; H04L29;06S2B 
er: JP1 9990500878T 19980528 


Priority number(s): US19970865482 19£ 


9; WO1998US10817 19980528 


Also published as: 

IW09854644 (A1) 
US5968176 (A) 
GB2342020 (A) 
GB2342020 (B) 
EP0990206 (A1) 


Abstract not available for JP 2002507295 (T) 
Abstract of corresponding document: WO 9854644 (A1) 
A system provides for establistiing security in a 
networic (10) that includes nodes tiaving security 
functions operating in muitiple protocoi iayers. 
iVluitipie network devices, sucii as remote access 
equipnnent (13), routers (14), switcties (12), 
repeaters (16) and networl< cards (15) having 
security functions are configured to contribute to 
impiementation of distributed firewail functions in 
the networic. By distributing firewali functionality 
throughout many iayers of the networi< in a variety 
of networl< devices, a pervasive firewaii is 
implemented. The pervasive, multilayer firewall 
includes a policy definition component (11) that 
accepts policy data that define how the firewall 
should behave. The multilayer firewall also includes 
a collection of network devices that are used to 
enforce the defined policy. The security functions 
operating in this collection of network devices 
across multiple protocol layers are coordinated by 
the policy definition component so that particular 
devices enforce that part of the policy pertinent to 
their part of the network. 
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